@fortemi/core 2026.9.5 → 2026.9.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fortemi/core",
-  "version": "2026.9.5",
+  "version": "2026.9.7",
   "description": "Browser-only knowledge management core: PGlite (PostgreSQL WASM), MCP tools, hybrid search, and profile-scoped Knowledge Shard interchange.",
   "keywords": [
     "fortemi",
@@ -58,6 +58,8 @@
     "./schemas/dataset-lineage/v1": "./schemas/dataset-lineage/v1.schema.json",
     "./schemas/dataset-materialization/v1": "./schemas/dataset-materialization/v1.schema.json",
     "./schemas/source-note-upsert/v1-conformance": "./schemas/source-note-upsert/v1.conformance.json",
+    "./schemas/lifecycle-purge/v1-conformance": "./schemas/lifecycle-purge/v1.conformance.json",
+    "./schemas/lifecycle-purge/contract-receipt": "./schemas/lifecycle-purge/contract.receipt.json",
     "./worker/pglite-worker": "./dist/worker/pglite-worker.js",
     "./service-worker/sw": "./dist/service-worker/sw.js",
     "./package.json": "./package.json"
@@ -69,6 +71,8 @@
     "schemas/dataset-lineage",
     "schemas/dataset-materialization",
     "schemas/source-note-upsert",
+    "schemas/lifecycle-purge",
+    "schemas/metadata-search/candidate",
     "benchmarks/dataset-materialization",
     "tools",
     "README.md",

package/schemas/lifecycle-purge/contract.receipt.json

@@ -0,0 +1,15 @@
+{
+  "contract": "lifecycle-purge/1.0.0",
+  "authority": {
+    "repository": "Fortemi/fortemi",
+    "issue": 1092,
+    "revision": "fd41d8165368f25495ed16f78c3b9a17778432c8",
+    "path": "contracts/lifecycle-purge/conformance/v1.json",
+    "sha256": "59327e3aad39d644a00d7f8fc6ece8689afcba0de027763a55ff68b38060ac7f"
+  },
+  "consumer": {
+    "repository": "Fortemi/fortemi-react",
+    "issue": 406,
+    "path": "packages/core/schemas/lifecycle-purge/v1.conformance.json"
+  }
+}

package/schemas/lifecycle-purge/v1.conformance.json

@@ -0,0 +1,73 @@
+{
+  "contract_version": "1.0.0",
+  "authority": "Fortemi/fortemi#1092",
+  "selector_semantics": "intersection",
+  "preview_ttl_seconds": 900,
+  "max_note_ids": 500,
+  "count_fields": [
+    "notes", "revisions", "links", "tags", "embeddings",
+    "attachments", "blobs", "graph_edges", "provenance_edges", "source_identities"
+  ],
+  "receipt_allowed_fields": [
+    "contract_version", "operation_id", "outcome", "counts", "completed_at", "policy"
+  ],
+  "receipt_forbidden_fields": [
+    "selector", "selector_hash", "selector_fingerprint", "tenant_id", "archive_id",
+    "note_ids", "source", "external_id", "operation_key", "storage_path",
+    "provider_payload", "content_digest"
+  ],
+  "cases": [
+    {
+      "id": "shared-blob",
+      "expectation": "Only blobs with no surviving primary or preview attachment reference are counted and deleted.",
+      "expected_counts": {
+        "notes": 1,
+        "revisions": 0,
+        "links": 0,
+        "tags": 0,
+        "embeddings": 1,
+        "attachments": 2,
+        "blobs": 1,
+        "graph_edges": 0,
+        "provenance_edges": 0,
+        "source_identities": 0
+      }
+    },
+    {
+      "id": "stale-preview",
+      "expectation": "A changed selected graph rejects execution and leaves all selected records intact."
+    },
+    {
+      "id": "exact-replay",
+      "expectation": "Repeating an operation ID with the same preview returns status without another relational delete or receipt."
+    },
+    {
+      "id": "cleanup-crash",
+      "expectation": "Repeating an external delete after a crash before acknowledgement converges to one terminal receipt."
+    },
+    {
+      "id": "restore-reerasure",
+      "expectation": "A restored retained target is re-erased before indexing and returns the operation to cleanup_pending until external cleanup completes."
+    },
+    {
+      "id": "source-intersection",
+      "expectation": "Combined note and source selectors intersect; a partial source purge retains shared journals and a whole-source purge removes them after the final identity is erased.",
+      "expected_counts": {
+        "notes": 1,
+        "revisions": 0,
+        "links": 0,
+        "tags": 0,
+        "embeddings": 1,
+        "attachments": 0,
+        "blobs": 0,
+        "graph_edges": 0,
+        "provenance_edges": 0,
+        "source_identities": 1
+      }
+    },
+    {
+      "id": "expired-preview-cleanup",
+      "expectation": "Creating a new preview removes expired unconsumed selector snapshots within the same tenant and memory."
+    }
+  ]
+}

package/schemas/metadata-search/candidate/1.0.0/README.md

@@ -0,0 +1,36 @@
+# Candidate Search Source Identity
+
+`source.receipt.json` binds these eleven schema/vector files to immutable
+Fortemi source `e99e4723293d12e76862ea83fda86ed70d3573c8`, plus that revision's
+OpenAPI and authority documentation. CI verifies the actual upstream bytes,
+not only agreement between local files and a local checksum.
+
+The three older receipts remain byte-identical historical adoption records.
+Their pre-commit bases and older OpenAPI hashes are not rewritten or treated as
+the current authority revision. The supplemental source pin proves committed
+candidate provenance, not publication, live runtime compatibility, complete
+capability negotiation or issue acceptance. All promotion claims remain false.
+
+The verifier accepts `--authority-root <repo>` to read immutable Git objects
+offline. Without it, CI uses bounded immutable-origin reads with no redirect or
+local-byte fallback. Both paths verify the same digests and complete inventory.
+
+Authority: [Fortemi #1091](https://git.integrolabs.net/Fortemi/fortemi/issues/1091).
+Consumer: [Core #405](https://git.integrolabs.net/Fortemi/fortemi-react/issues/405).
+Other declared consumers, producer CI, installed/released acceptance and release
+publication remain separate gates. Suite NO-GO and named shard profiles are unchanged.
+
+## Existing Predicate Semantics
+
+Core uses strict Ajv validation before SQL compilation, then checks reversed
+range bounds in Unicode scalar/numeric order. Migration 33 supplies bounded
+index keys with exact rechecks on author metadata. Source runs come from scoped
+source identities, not author metadata. See ADR-016 for scope/default changes,
+upgrade/rollback behavior and remaining cross-runtime/citation acceptance.
+
+`src/__tests__/metadata-predicates.test.ts` executes the 51 input/truth cases and
+15 SQL scope cases on a fully migrated clean PGlite database. It maps the corpus
+owner tenant-a to Core's default source scope explicitly and keeps tenant-b
+foreign. It never changes expected membership. Additional tests exercise actual
+search entries, selective plans and old-database upgrade; they do not establish
+verified hosted authorization, real model inference or released compatibility.

package/schemas/metadata-search/candidate/1.0.0/contract.receipt.json

@@ -0,0 +1,38 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate-unpublished",
+  "authority": {
+    "repository": "Fortemi/fortemi",
+    "issue": 1091,
+    "baseCommit": "a701847db779a0a3adfa36a09dfa1055a10a0a0a",
+    "sourceState": "uncommitted candidate; base is not the contract revision",
+    "path": "contracts/metadata-search/candidate/1.0.0/",
+    "files": {
+      "predicates.schema.json": "e325707ce20abb88ef3a8f4bbb0d02ab09501b1ffe9b48b0c92a96e97dda00c3",
+      "predicate-vectors.json": "df9e129cab4708db71c3e22f87efd252fbcac144daa45a53ee1716f4a1a05ae7",
+      "sql-scope-vectors.json": "dcd35298a3bc485a6f1c87c6c87f136ee98121dad3f2b1c8b590b2e5381aa4d5",
+      "evidence-locator.schema.json": "cd8427c507bca1a08bdb68da0a5d2759d1d7805401db3c00372ab249652efb7a",
+      "evidence-vectors.json": "b532a4fa7697bdfc87e8541575fcee7c94a5b5ac53e4a6472438c49247e6b266",
+      "evidence-set.schema.json": "da7e5d41bd563cb2cfe424cf7dfa92007a865ee0e1a9a4832ef669039d80717e",
+      "evidence-set-vectors.json": "b84061ee252d2ee25d744111d2a04dfcd2c490274d4285bac31f4bd0e91e47d7"
+    }
+  },
+  "consumer": {
+    "repository": "Fortemi/fortemi-react",
+    "issue": 405,
+    "backend": "pglite",
+    "test": "src/__tests__/metadata-predicates.test.ts",
+    "evidenceTest": "src/__tests__/search-evidence.test.ts",
+    "evidenceSetTest": "src/__tests__/search-evidence-set.test.ts"
+  },
+  "scopeMapping": {
+    "owningTenant": "tenant-a -> default",
+    "foreignTenant": "tenant-b -> tenant-b",
+    "authorizationEvidence": false
+  },
+  "claims": {
+    "promotedContract": false,
+    "fullIssueAcceptance": false,
+    "suiteParity": false
+  }
+}

package/schemas/metadata-search/candidate/1.0.0/evidence-locator.schema.json

@@ -0,0 +1,50 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://fortemi.com/contracts/metadata-search/candidate/1.0.0/evidence-locator.schema.json",
+  "title": "Candidate search evidence locator",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version", "note_id", "unit", "content_digest", "span"],
+  "properties": {
+    "version": { "const": "1.0.0" },
+    "note_id": { "$ref": "#/$defs/identifier" },
+    "unit": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "id", "index"],
+      "properties": {
+        "kind": { "enum": ["current", "title", "embedding", "attachment"] },
+        "id": { "$ref": "#/$defs/identifier" },
+        "index": { "type": "integer", "minimum": 0, "maximum": 2147483647 }
+      },
+      "if": { "properties": { "kind": { "enum": ["current", "title", "attachment"] } } },
+      "then": { "properties": { "index": { "const": 0 } } }
+    },
+    "content_digest": { "$ref": "#/$defs/digest" },
+    "span": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["unit", "start", "end"],
+      "properties": {
+        "unit": { "const": "utf8-bytes" },
+        "start": { "type": "integer", "minimum": 0, "maximum": 16777216 },
+        "end": { "type": "integer", "minimum": 0, "maximum": 16777216 }
+      }
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["namespace", "external_id_hash", "import_run_id", "schema_version"],
+      "properties": {
+        "namespace": { "$ref": "#/$defs/identifier" },
+        "external_id_hash": { "$ref": "#/$defs/digest" },
+        "import_run_id": { "$ref": "#/$defs/identifier" },
+        "schema_version": { "$ref": "#/$defs/identifier" }
+      }
+    }
+  },
+  "$defs": {
+    "identifier": { "type": "string", "minLength": 1, "maxLength": 200, "pattern": "^[^\\u0000]+$" },
+    "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+  }
+}

package/schemas/metadata-search/candidate/1.0.0/evidence-resolution-vectors.json

@@ -0,0 +1,355 @@
+{
+  "schemaVersion": "fortemi.evidence-resolution-vectors.candidate.v1",
+  "boundary": "Portable wire schema cases, not current-storage, authorization, model or released-consumer acceptance. Semantic locator and range checks remain required.",
+  "requests": [
+    {
+      "id": "minimal",
+      "valid": true,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0,
+            "end": 0
+          }
+        }
+      }
+    },
+    {
+      "id": "archived-explicit",
+      "valid": true,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0,
+            "end": 0
+          }
+        },
+        "include_archived": true
+      }
+    },
+    {
+      "id": "metadata-typed",
+      "valid": true,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0,
+            "end": 0
+          }
+        },
+        "metadata_predicates": [
+          {
+            "path": "model",
+            "op": "eq",
+            "value": 42
+          }
+        ]
+      }
+    },
+    {
+      "id": "missing-locator",
+      "valid": false,
+      "value": {}
+    },
+    {
+      "id": "null-locator",
+      "valid": false,
+      "value": {
+        "locator": null
+      }
+    },
+    {
+      "id": "caller-tenant",
+      "valid": false,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0,
+            "end": 0
+          }
+        },
+        "tenant_id": "forged"
+      }
+    },
+    {
+      "id": "caller-archive",
+      "valid": false,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0,
+            "end": 0
+          }
+        },
+        "archive_id": "forged"
+      }
+    },
+    {
+      "id": "null-metadata",
+      "valid": false,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0,
+            "end": 0
+          }
+        },
+        "metadata_predicates": null
+      }
+    },
+    {
+      "id": "unknown-metadata",
+      "valid": false,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0,
+            "end": 0
+          }
+        },
+        "metadata_predicates": [
+          {
+            "path": "unknown",
+            "op": "eq",
+            "value": "x"
+          }
+        ]
+      }
+    },
+    {
+      "id": "null-archived",
+      "valid": false,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0,
+            "end": 0
+          }
+        },
+        "include_archived": null
+      }
+    },
+    {
+      "id": "unknown-property",
+      "valid": false,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0,
+            "end": 0
+          }
+        },
+        "extra": 1
+      }
+    },
+    {
+      "id": "unknown-unit",
+      "valid": false,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "history",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0,
+            "end": 0
+          }
+        }
+      }
+    },
+    {
+      "id": "fractional-offset",
+      "valid": false,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0.5,
+            "end": 0
+          }
+        }
+      }
+    },
+    {
+      "id": "wrong-span-unit",
+      "valid": false,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "characters",
+            "start": 0,
+            "end": 0
+          }
+        }
+      }
+    },
+    {
+      "id": "null-source",
+      "valid": false,
+      "value": {
+        "locator": {
+          "version": "1.0.0",
+          "note_id": "00000000-0000-0000-0000-000000000001",
+          "unit": {
+            "kind": "current",
+            "id": "00000000-0000-0000-0000-000000000001",
+            "index": 0
+          },
+          "content_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+          "span": {
+            "unit": "utf8-bytes",
+            "start": 0,
+            "end": 0
+          },
+          "source": null
+        }
+      }
+    }
+  ],
+  "responses": [
+    {
+      "id": "empty-range",
+      "valid": true,
+      "value": {
+        "text": ""
+      }
+    },
+    {
+      "id": "raw-unicode",
+      "valid": true,
+      "value": {
+        "text": "\uFEFFraw\r\n\ud83d\ude42"
+      }
+    },
+    {
+      "id": "missing-text",
+      "valid": false,
+      "value": {}
+    },
+    {
+      "id": "null-text",
+      "valid": false,
+      "value": {
+        "text": null
+      }
+    },
+    {
+      "id": "numeric-text",
+      "valid": false,
+      "value": {
+        "text": 1
+      }
+    },
+    {
+      "id": "unknown-property",
+      "valid": false,
+      "value": {
+        "text": "x",
+        "source": "not-permitted"
+      }
+    }
+  ]
+}

package/schemas/metadata-search/candidate/1.0.0/evidence-resolution.schema.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://fortemi.com/contracts/metadata-search/candidate/1.0.0/evidence-resolution.schema.json",
+  "title": "Candidate current-storage evidence resolution",
+  "$defs": {
+    "SearchEvidenceResolveRequest": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["locator"],
+      "properties": {
+        "locator": { "$ref": "evidence-locator.schema.json" },
+        "metadata_predicates": { "$ref": "predicates.schema.json" },
+        "include_archived": { "type": "boolean", "default": false }
+      }
+    },
+    "SearchEvidenceResolveResponse": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["text"],
+      "properties": {
+        "text": { "type": "string", "maxLength": 16777216 }
+      }
+    }
+  }
+}